Discuss September 2019

discuss@lists.centos.org

107 participants
76 discussions

audit freeing multiple contexts (when running certbot)
by tony＠softins.co.uk 17 Sep '19

17 Sep '19

Apologies if it's considered off-topic, but I'm not sure in what part of the system the issue lies. So I am giving as much info as possible, not knowing which is most relevant. I have two VMs hosted on ESX, running CentOS 6.10 One has kernel 2.6.32-754.11.1.el6.i686 and the other has 2.6.32-754.18.2.el6.i686 Both have selinux, currently in permissive mode. On both machines we have noticed messages like the following appear in /var/log/messages from time to time: Sep 17 10:32:28 merlin kernel: audit(:0): major=252 name_count=0: freeing multiple contexts (1) Sep 17 10:32:28 merlin kernel: audit(:0): major=355 name_count=0: freeing multiple contexts (2) Sep 17 10:32:29 merlin kernel: audit(:0): major=252 name_count=0: freeing multiple contexts (1) Sep 17 10:32:29 merlin kernel: audit(:0): major=355 name_count=0: freeing multiple contexts (2) On further investigation, this only happens when certbot-auto runs (under python 3.4), whether or not it renews the certificate. The above instance was created by running the following command: [root@merlin ~]# date ; cd /opt/letsencrypt && ./certbot-auto renew ; date Tue Sep 17 10:32:24 BST 2019 /opt/eff.org/certbot/venv/lib/python3.4/site-packages/cryptography/hazmat/bindings/openssl/binding.py:163: CryptographyDeprecationWarning: OpenSSL version 1.0.1 is no longer supported by the OpenSSL project, please upgrade. A future version of cryptography will drop support for it. utils.CryptographyDeprecationWarning Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Processing /etc/letsencrypt/renewal/xxxx.conf - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Cert not yet due for renewal - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - The following certs are not due for renewal yet: /etc/letsencrypt/live/xxxx/fullchain.pem expires on 2019-11-15 (skipped) No renewals were attempted. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Tue Sep 17 10:32:30 BST 2019 [root@merlin letsencrypt]# Has anyone else seen anything similar? Is it something that can be fixed, or should be ignored? Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

reconfigure centos-6.9 host to ignore missing nic
by James B. Byrne 16 Sep '19

16 Sep '19

I need to work on a host which has been offline and powered down for some time. I has CentOS-6.9 installed. At some point it had two nics, one on the motherboard (still present and working) and one as an expansion card. When booted the console displays: pciehp 0000:00:1c:0:pcie04: Failed to check link status repeatedly. How do I tell the host to ignore the missing nic or remove it from the system configuration so that the error is removed. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

How to disable i915 module
by Ian Pilcher 15 Sep '19

15 Sep '19

I am setting up CentOS 7 on my new firewall. This will run as a head- less system, accessed via a serial console when necessary. It's only a 2GB system, so I don't see any reason to have the GPU consuming any of the RAM. I've blacklisted the i915, drm, and drm_kms_helper modules and rebuilt the initramfs, but the i915 module is still being loaded. Anyone know what might be loading the module and how I can stop it? TIA! -- ======================================================================== Ian Pilcher arequipeno(a)gmail.com -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================

1 1

RPMDB problem
by Fred Smith 14 Sep '19

14 Sep '19

When doing yum operations I get this message at the end of whatever yum was doing: ** Found 1 pre-existing rpmdb problem(s), 'yum check' output follows: brscan4-0.4.8-1.x86_64 is a duplicate with brscan4-0.4.3-1.x86_64 It is true, if I do "rpm -qa | grep brscan" it shows two of them. what's the best/proper way to deal with this? -remove both, reinstall one? -remove one? which one? I don't see a feature in rpm (or yum) for removing a single one of duplicate packages. How? Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For the word of God is living and active. Sharper than any double-edged sword, it penetrates even to dividing soul and spirit, joints and marrow; it judges the thoughts and attitudes of the heart." ---------------------------- Hebrews 4:12 (niv) ------------------------------

3 2

File server as host for a Windows Server VM?
by miguel medalha 14 Sep '19

14 Sep '19

I hope that someone here can give some advice on the following: I have a Samba based Active Directory. A CentOS 7.6 machine runs as a file server and hosts the Windows user profiles for all the Windows workstations. Now management has decided that they need a Windows server for a couple of administrative applications, which need MS SQL Server. That would be the only role of this Windows. Since the above mentioned server has enough resources (2x Quad Core Xeon 2.66 GHz with HT and 48 GB of RAM, a dual port 10 Gb NIC) I thought of making it a host for a Windows virtual machine using KVM. Given the resources and current setup we have, at the moment it wouldn't be practical to implement both servers as VMs on top of a bare metal hypervisor. According to your experience, is there any motive why I shouldn't use such a setup? Thank you for any insights.

5 8

Opinions on using CR repository in production environments.
by Gwaland 13 Sep '19

13 Sep '19

I was wondering what people's opinions are on running the CR repository on production systems? I'm currently predisposed to not do it since it indicates it hasn't fully gone through QA yet. But from my understanding except for the alt-arch systems these are just recompiles of the redhat RPMs after debranding right? I'm Curious how other people are treating this repository since, from the sounds of it, rpms are going to be in holding here between releases. So would you treat it as a production repository or for testing only? Do we know how it's actually intended to be treated? Any opinion is appreciated.

2 1

why windows 10 can't access centos samba
by qw 13 Sep '19

13 Sep '19

Hi, I can access centos's samba via windows 7, but fail via windows 10. Why? Thanks! Regards Andrew

10 16

clamd / amavisd missing socket
by Jon LaBadie 12 Sep '19

12 Sep '19

I think something along these lines appeared before but I was unable to find them. I'm on a 7.6 system, been running clamav and amavisd-new since 6 days with little problem. On a recent reboot, clamd@amavisd does not start up and fails manual start. The problem seems to be the missing socket that connects the pair, "/var/run/clamd.amavisd/clamd.socket". I believe this should be created by systemd files but I see no indication of them on my system. Anyone know which files might be missing and where to get copies? Or a work around to run clamd@amavisd and get rid of the "*** UNCHECKED ***' additions to my my Subject lines? BTW manual creation of the socket with netcat had no effect on the startup. Jon -- Jon H. LaBadie jon(a)jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

2 2

Increase logging verbosity of saslauthd?
by Jobst Schmalenbach 12 Sep '19

12 Sep '19

Hi CentOS 7.X, sendmail.x86_64 8.14.7-5.el7, cyrus-sasl.x86_64 2.1.26-23.el7 There are conflicting message on how to increase the logging of saslauthd. I know I can do this: /usr/sbin/saslauthd -d -n0 -m /var/run/saslauthd -a pam but that requires a terminal as saslauthd logs the output to STDOUT, this is not what I want. I would like to have it started as a daemon and verbosity of logging increased into a log file. How can I increase the verbosity of logging for saslauthd? thanks -- Jobst Schmalenbach If you think knowledge is expensive, try ignorance.

3 5

Need to update gcc to version >=6 on CentOS 7 ?
by John Chludzinski 11 Sep '19

11 Sep '19

I need to build u-boot on my CentOS 7 machine but encounter this: > *** Your GCC is older than 6.0 and is not supported I've updated the installation on my machine but the current version is: > gcc (GCC) 4.8.5 20150623 (Red Hat 4.8.5-36) How do I go about updating gcc to version 6 or greater on my CentOS 7 machine? And do so safely?

3 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2019